Know when someone changes a site

Clients, their staff and other developers can still sign in to wp-admin and change things. With WP Foreman plugin 0.7.0 or newer, every one of those changes goes in the site’s log with the person’s name, and you can get an email the moment it happens. They don’t need a WP Foreman account.

What’s recorded

Changes you make through WP Foreman are logged under your name already, so they’re never counted as “outside” changes.

Who and how

For each change the log shows the WordPress user’s name, email and role, the IP address it came from, and how it happened: in wp-admin, through WP-CLI (the command line), by a WordPress auto-update, by a scheduled task on the site, or through the WordPress REST API. Click the entry for the full details.

How fast

The site tells WP Foreman as soon as the change is made, usually within seconds. If WP Foreman can’t be reached at that moment, the site keeps the event and sends it with the next check (about every 30 minutes). Nothing is lost if a message fails.

Emails

You get one email per site per batch of changes, titled “Heads up: …”, listing what changed, who did it and when, with a link to the log. Turn these on or off in Settings › Notifications. They’re on by default.

Want them somewhere else? The site.changed webhook sends the same changes to Slack (through Zapier or Make) or your own system.

Changes WordPress can’t name

If files are changed directly on the server (FTP, the host’s file manager, a deploy script), WordPress doesn’t know who did it. WP Foreman still notices the change at its next check and logs it as “made on the site, outside WP Foreman”, without a name.

Privacy

To show who made a change, WP Foreman stores the WordPress user’s name, email, role and IP address with that log entry. It never sees or stores WordPress passwords. See What data WP Foreman stores.